Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A077816AE47211EEA22F126F775412E6.roa
File: A077816AE47211EEA22F126F775412E6.roa (raw, json)
Hash identifier: cfjLS1EJLIjWqQdhaoYdhd0kiurzs1xm4rJ0k+HMYzs=
Subject key identifier: 21:22:80:0A:14:EF:20:CC:F4:EB:85:A7:CA:9D:9F:B2:61:4D:D4:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A231
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A077816AE47211EEA22F126F775412E6.roa
Signing time: Sun 17 Mar 2024 15:25:46 +0000
ROA not before: Sun 17 Mar 2024 15:25:43 +0000
ROA not after: Tue 30 Apr 2024 15:25:43 +0000
asID: 63139
IP address blocks: 154.94.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41521 (0xa231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:25:43 2024 GMT
Not After : Apr 30 15:25:43 2024 GMT
Subject: CN=65f70b7a-8bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:69:96:a4:6c:2b:d1:16:38:63:37:2e:c8:
da:5f:16:29:bb:79:b6:57:4f:cc:24:7d:13:08:6d:
d0:87:f8:4d:76:0f:b7:a3:6d:29:48:e3:83:e9:5e:
34:c9:15:3b:f0:94:00:c7:48:c1:de:84:4f:7d:b9:
ec:15:ef:13:de:1f:ac:eb:6c:18:4e:40:ad:c2:3b:
99:93:03:83:f9:6d:5b:fa:8d:41:12:87:6b:89:5f:
90:95:48:c4:8f:c8:f7:c5:eb:61:0b:e4:c0:8d:dc:
ff:43:0d:50:8c:62:0a:70:5e:fc:9c:7d:4f:f1:ac:
35:90:d5:81:c5:79:1d:a1:a9:89:ce:66:76:bf:85:
aa:04:2e:98:fb:4f:fa:53:73:dd:dc:8c:9d:fe:6e:
49:42:b1:d2:78:9d:d1:fb:2b:e9:14:07:a6:73:79:
07:cf:c7:7a:72:42:9e:a1:f2:17:24:4e:bd:0f:d5:
39:cd:84:38:e8:aa:60:bb:fc:da:47:38:cf:8c:1d:
84:9b:75:03:a5:57:9e:ee:11:04:74:7e:f3:35:db:
38:fa:dd:06:f2:2f:22:74:ee:38:b8:74:38:d4:80:
5a:e1:17:8d:6a:f2:6f:26:cf:91:3c:0b:90:4c:50:
9d:6e:22:d6:2d:bd:b6:ff:bb:3c:17:7d:8d:48:bd:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:80:0A:14:EF:20:CC:F4:EB:85:A7:CA:9D:9F:B2:61:4D:D4:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A077816AE47211EEA22F126F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.72.0/24
Signature Algorithm: sha256WithRSAEncryption
90:81:24:cf:e7:c4:b4:81:14:63:6e:89:4d:5f:f4:64:ca:d5:
10:38:da:df:60:1c:eb:fb:bd:e7:6e:1d:73:a2:1f:69:ad:da:
05:a5:33:7b:2b:74:79:c3:70:13:fc:33:ae:05:75:e5:76:ce:
39:44:2d:95:74:2b:b6:de:eb:ad:26:77:0d:29:8b:44:1f:3f:
b7:0d:54:03:86:e8:3d:af:c0:0b:86:4c:ca:0d:36:4a:a9:0c:
2a:ed:0d:94:9e:b4:15:dc:79:b4:1a:7f:be:1e:f3:91:c4:aa:
bb:2e:d7:e9:df:01:fc:dd:d8:0c:9f:e7:a4:af:62:49:56:9e:
1b:c4:33:8d:95:75:63:17:03:ad:88:f6:cd:95:d9:39:68:ab:
49:5a:ae:5b:4a:7c:7c:f6:0e:5e:25:2b:f2:a0:6e:3e:e3:7d:
11:19:2f:77:b1:27:30:e2:49:36:b5:e3:75:f7:ee:b3:6e:78:
a3:87:a1:16:cc:d5:32:57:28:b9:52:a6:19:1f:b3:2b:14:96:
65:7a:b9:fb:a1:69:69:d8:8a:17:d5:56:c6:48:c9:e5:3e:ea:
f0:40:89:a6:ec:68:33:c0:cc:24:77:ef:be:a8:06:3b:52:7c:
39:67:a5:cc:6e:ce:34:be:be:e3:b9:fd:f9:25:8a:c6:94:8c:
f1:72:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org